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COMPUTING INTEGRAL POINTS ON HYPERELLIPTIC 
CURVES USING QUADRATIC CHABAUTY 

JENNIFER S. BALAKRISHNAN, AMNON BESSER, AND J. STEFFEN MULLER 


Abstract. We give a method for the computation of integral points on a 
hyperelliptic curve of odd degree over the rationals whose genus equals the 
Mordell-Weil rank of its Jacobian. Our approach consists of a combination 
of the p-adic approximation techniques introduced in previous work with the 
Mordell-Weil sieve. 


1. Introduction 

Let / S Z[x] be a separable polynomial of degree at least 3. The problem of 
determining all integer solutions (x, y) to the equation 

= f{x) 

is classical in nature and has been studied from several different viewpoints, yield¬ 
ing a toolbox of approaches. Techniques from Diophantine approximation, which 
make use of archimedean analysis, include linear forms in elliptic logarithms, S- 
unit equations, and Baker’s method. We discuss each of these techniques and their 
practical limitations - usually arising from astronomical height bounds or working 
with number fields of large degree - in Section 1.1 below. 

In the realm of non-archimedean analysis, perhaps the most celebrated tech¬ 
nique in the study of integral points is Coleman’s interpretation [19] of the method 
of Chabauty [18], allowing one to determine the rational points on a curve whose 
Jacobian has Mordell-Weil rank less than its genus. This is accomplished by com¬ 
puting a p-adic line integral, among whose zeros lie the rational points of the curve. 
The hypothesis that the rank is less than genus is essential, and in practice, it is 
perhaps more difficult to check this hypothesis than to carry out the actual con¬ 
struction of the p-adic integral. 

Over the last decade, Kim has initiated an exciting program aimed at removing 
this restricting on rank, allowing the study of rational points on hyperbolic curves 
through the use of nonabelian geometric objects generalizing the role of the Ja¬ 
cobian in the Chabauty-Coleman method [28, 7]. Through delicate calculations in 
p-adic Hodge theory, this nonabelian Chabauty method can produce iterated p-adic 
integrals playing the role of the abelian integrals arising from the Jacobian of the 
curve [29, 8]. 

In the spirit of Kim’s program, we previously gave a method [5] based on p-adic 
height pairings to p-adically approximate the set of integral points in the case when 
the curve has Jacobian with Mordell-Weil rank equal to its genus. To state this more 
precisely, let us introduce some notation. Consider the genus g hyperelliptic curve 
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X which has an affine model given by the equation = f{x) with deg / = 2g + 1, 


and let J denote its Jacobian. Fix an odd prime p such that X has good reduction 
at p. Define locally analytic functions fii X{Qp) —> Qp by 




and extend them linearly to functionals 


fi '■ J (Q) ® Q ^ Q; 


The method of Chabauty and Coleman can be interpreted as follows: If the Mordell- 
Weil rank of Jiff) is less than g, then one can construct a function given by a linear 
combination of the fi on J{Qp) that vanishes on Jff). By restricting this function 
to X(Qp), one can approximate the points X(Q). 

In [5] we showed that under the hypotheses that J has ordinary reduction at 
p, the Mordell-Weil rank of Jff) is equal to g and the fi are linearly independent 
functionals on J(Q) ® Q, one can construct a locally analytic function p that takes 
on a prescribed, finite set of constants T on integral points of X. By setting p equal 
to each of these values, we find, among the set of p-adic points, the integral points 
on the working affine model of X. The function p arises naturally from a local 
decomposition of the global p-adic height pairing, a natural quadratic form on the 
Jacobian; we refer to this method of finding integral points as quadratic Chabauty. 

In this work, we show how quadratic Chabauty can be used in practice to prov- 
ably find all integral points on X by combining it with the Mordell-Weil sieve. 
Since p can be written as a convergent power series on every residue disk, we can 
explicitly determine the finitely many solutions over Zp to the equations 


( 1 . 1 ) 


p{z) = t, 


up to some finite precision p^, as t runs through T. For this computation, we need 
to relate the global p-adic height to a natural basis of quadratic forms on J(Q) (8)Q, 
compute double Coleman integrals describing the local height contribution at p, 
and calculate the arithmetic intersections describing the local height contributions 
away from p. We briefly discussed how to compute these quantities in [5]; there 
we also presented two examples. In this paper, we give a full algorithm describing 
the necessary computations and provide an analysis of the p-adic precision which 
must be maintained throughout the computation. We furthermore detail how to 
combine quadratic Chabauty with the Mordell-Weil sieve to precisely find the set 
of integral points. 

We note that the algorithms for computing integral points on elliptic curves over 
Q are rather well-developed and perform particularly well in the case of rank 1 (see 
Section I.l), so we have just a few remarks here, combining quadratic Chabauty 
with information about the group of Fg-rational points for primes q of good reduc¬ 
tion. This method is treated in Appendix A. 

In this paper, we focus on a method for curves having genus at least 2. Here the 
existing approaches usually require either the rank r of J(Q) to be strictly smaller 
than g or the availability of a set of Mordell-Weil generators, which currently is 
only possible for p < 3; see Section l.I. Our approach here, combining quadratic 
Chabauty with the Mordell-Weil sieve, thus presents the first systematic and prac¬ 
tical method to compute integral points for curves X as above with r = g > A. 
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In broad terms, the idea is as follows: We first find the integral points of small 
height; our goal is to show that this set already contains all integral points. Then 
we apply quadratic Chabauty using several primes, producing an integer M and a 
list of residue classes in J(Q)/MJ(Q). We want to show that each of these residue 
classes cannot contain the image of a rational point on X. We accomplish this 
by applying the Mordell-Weil sieve. This method, pioneered by Scharaschkin [38], 
combines information modulo several primes v of good reduction by finding the 
image of X(F^) inside J{¥y)/MJ{¥v). 

The idea of using p-adic techniques, notably Chabauty’s method, to come up with 
congruence conditions and hence suitable lists of residue classes for the Mordell- 
Weil sieve is not new, see [13] and, in particular [37], which also uses congruence 
conditions modulo different primes. In the present work, however, we choose the 
primes v in the Mordell-Weil sieve computation and the primes used for quadratic 
Chabauty at the same time, making it possible to keep the number of residue 
classes and/or the number (and size) of the primes v comparatively small. This is 
necessary, because we want to consider examples of large genus (and, hence, large 
rank), and one typically needs to find about v discrete logarithms in J(Fi,), which 
becomes slow for large v and g. See Example 9.3, where we use this approach to 
find the integral points on a curve of genus 4; here v = 317 is the largest prime we 
had to consider. 

The structure of this paper is as follows: In Section 2, we review the method 
of quadratic Chabauty. In Section 3 we give a more detailed description of the 
algorithms needed to compute the quantities in quadratic Chabauty and to solve 
equation (1.1). In Section 4, we discuss some practical considerations arising from 
the method. We present the Mordell-Weil sieve and explain how to apply it in our 
situation in Sections 5-7. This allows us to describe a complete method for the 
computation of integral points when X satisfies r = g > 1 'm Section 8. Finally, we 
mention a few examples in Section 9, one of which has genus 4 and rank 4 and is 
not amenable to previous algorithms. 

Most of our algorithms can be generalized to hyperelliptic curves defined over 
number fields. This is work in progress. 

1.1. Other approaches. We discuss here how our method compares to other ap¬ 
proaches in the literature. For completeness, we also give an overview of existing 
methods in the case of genus 1 as well. 

The most efficient technique for the computation of integral points on elliptic 
curves relies on linear forms in elliptic logarithms. These can be used to compute 
an upper bound on the height of integral points [21, 27], or, equivalently, on the 
size of the coefficients of an integral point in terms of a given set of Mordell- 
Weil generators. This bound can then be reduced using the LLL-algorithm, see 
for instance [40, 34, 47]; frequently, the resulting bound is small enough to find 
all integral points simply by searching up to this bound. The computer algebra 
systems Sage [42] and Magma [11] contain an implementation of this algorithm. 

Quadratic Chabauty can be combined with this approach, as it can be used to 
provide a lower bound on the height of all integral points that have not been found 
yet. However, here we are restricted to the rank 1 case, where usually a generator 
of the Mordell-Weil group modulo torsion is easily computed and the upper bounds 
after LLL-reduction are small enough so that only a few multiples of the generator 
have to be computed to provably find all integral points. 
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For genus greater than 1, no analogue of the algorithm based on elliptic loga¬ 
rithms is known. We briefly summarize the existing algorithms. More detail can 
be found in the introduction to [17]; see also [41]. 

The method of Chabauty-Coleman [19] is a p-adic method arising from Cole¬ 
man’s reinterpretation of Chabauty’s theorem [18]; see [31] for an introduction to 
the method as well as some further variations. It can often be used to compute 
X(Q) in practice, provided g is greater than the rank of J(Q). It can also be com¬ 
bined with the Mordell-Weil sieve [16], which we discuss in detail in Section 5. On 
its own, the Mordell-Weil sieve is most useful to show that a given curve has no 
rational points, which is never the case for our curves. 

Another class of approaches to the computation of X (Q) is based on coverings of 
X, see for instance [22, 15]. These require computations of the class group and unit 
group of number fields of potentially large degree. In practice, such methods often 
combine the use of coverings with elliptic curve Chabauty [12, 25], which requires 
the computation of Mordell-Weil groups of elliptic curves over number fields of 
large degree. Such computations can be prohibitively expensive in practice, but 
sometimes work rather well for reasonably small genus, rank and coefficients. 

There are also methods which can be used to provably find all integral points. 
These are based on Baker’s method, which can be used to compute an upper bound 
on the height of integral points on X, which provides a theoretical algorithm for 
the computation of the integral points. While Baker’s original bounds were too 
large to be of much practical use, a number of authors have produced substantial 
improvements; see [17, §1] for an overview. Some algorithms based on Baker’s 
method are given in [41]. 

In [17], a refinement of the Mordell-Weil sieve is discussed, which can be used 
to show that any rational points on X which have not been found yet must have 
extremely large height. It is possible to obtain lower bounds around in this 

way. The authors of loc. cit. also produce explicit upper bounds on the height 
of integral points. These are often good enough to show that all integral points 
have been found when combined with the lower bounds. The main obstacle is that 
for the refinement of the Mordell-Weil sieve one needs an explicit set of generators 
of the Mordell-Weil group J(Q). In practice, this is only possible when g < 3, 
see [24, 43, 45, 32, 46]. 

The method we present here in Section 8 is applicable whenever we can prove 
that the rank is equal to the genus and we have explicit generators of a subgroup 
of J(Q)/J(Q)tors of finite index. 
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2. Overview of quadratic Chabauty 

In this section, we give an overview of the method of quadratic Chabauty [5] for 
hyperelliptic curves and describe the p-adic analytic functions that allow us to find 
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integral points. Let / G Z[x] be a separable polynomial of degree 2g + 1 > 3. The 
equation 

2 /^ = f(x) 

defines a hyperelliptic curve X of genus g over Q as follows: Let 

U = Spec(Z[x,g]/(g^ - f(x))). 

Then X is the normalization of the projective closure of the generic fiber of it 
contains a unique point oo at infinity, and this point is Q-rational. We denote by 
w: X ^ X the hyperelliptic involution on X and by t the embedding of X into its 
Jacobian J which maps a point P to the class of (P) — (oo). Fix a branch of the 
p-adic logarithm, which we denote as log^. 

We assume that p is a prime of good reduction for X. For a finite place n of Q 
and divisors Di and D 2 on X(Q^) of degree zero with disjoint support, let 

hy{Di, D 2 ) G Qp 

denote the local p-adic height pairing at v defined by Coleman and Gross [20] with 
respect to a direct sum decomposition of H^^{X x Qp): 

(2.1) X Qp) = W© JL°r(X X Qp,0^,qJ. 

The local p-adic height pairing is symmetric if and only if W is isotropic with 
respect to the cup product pairing. When p is a prime of good ordinary reduction, 
we take W to be the unit root subspace for the action of Frobenius. 

For V p, the symmetric bilinear pairing hy{Di, D 2 ) can be defined in terms 
of arithmetic intersection theory on a regular model of X x Q„ over while for 
n = p it is given by a Coleman integral along D 2 of a certain differential of the 
third kind with residue divisor Di. 

If Di and D 2 are defined over Q, then the sum 

h{Di, D2) = hy{Di, D2) 

V 

of local height pairings over the finite places i; of Q respects linear equivalence. It 
induces the global Coleman-Gross p-adic height pairing 

"^(Q) ^ '^(Q) Qp. 

This is a symmetric bilinear pairing, which is conjectured to be nondegenerate. 

In [4], it was shown that the restriction that Hi and D 2 must have disjoint 
support can be removed by extending the local height pairing relative to a choice 
of tangent vectors. This theme was further explored in [5], where we used a certain 
consistent choice of tangent vectors to study local heights. The resulting local 
height pairing at p gives rise to a function 

t{z) = hp{{z) - ( 00 ), (z) - ( 00 )) 

defined on Jf(Qp); we can then extend r to a function on X(Qp). This function 
turns out to be a Coleman function in the sense of [10] and, by [5, Theorem 2.2], 
a double Coleman integral. Hence it can be written as a convergent p-adic power 
series on every residue disk. 

We dehne locally analytic functions fi: X(Qp) —>■ Qp by 
fi{z) = [ uji, 0<i<g-l 


OO 
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where uii = These fi can be extended linearly to functionals 

fi ■ J (Qp) <8> Q Qp. 

Because Coleman integrals are compatible with the action of the absolute Galois 
group of Qp, the restrictions of these functionals to J(Q) ^ Q, also denoted by fi, 
are Qp-valued. 

From now on, we make the assumption that / does not reduce to a square modulo 
q for any prime number q. In [5] we proved the following result as Theorem 3.1: 

Theorem 2.1. Suppose that the Mordell-Weil rank of J(Q) is g and that the fi 
are linearly independent as functionals on J(Q) 0 Q. Then there exist constants 
otij G Qp such that the locally analytic function 

( 2 . 2 ) p{z)=t{z)- a^jfi{z)fj{z) 

0<i<j<g-l 

takes values on U{'I\\/p\) in an effectively computable finite set T C Qp. 

Remark 2.2. In the statement of [5, Theorem 3.1] we incorrectly required only 
that no linear combination of the fi vanished on W(Z[l/p]), but what is actually 
needed is the stronger independence assumption stated here, which was indeed used 
in the proof of the theorem. 

Remark 2.3. Note that we can apply a variant of the method of Chabauty- 
Coleman if a linear combination of the fi vanishes on W(Z[l/p]), so the “quadratic 
Chabauty” situation described in the theorem is really the novel case. 

We give a sketch of the proof of Theorem 2.1. Because the rank is g and the fi 
are linearly independent, the set 

( \Uif] + /j7*) j 

L ^ J 0<i<J<g-l 

forms a basis of the space of Qp-valued bilinear forms on J(Q) ® Q. The global 
p-adic height pairing h is also a Qp-valued bilinear form on J(Q) ® Q, so there are 
constants aij G Qp such that 

(2.3) h{{P) - (oo), (P) - (oo)) =Ya^,h{P)f,{P) 

i<j 

for all P G ^(Q). 

The right hand side of (2.3) extends to a locally analytic Qp-valued function on 
X(Qp). It then only remains to show that 

p{z) := t{z) - Y 

i<j 

can only take values on Z/f(Z[l/p]) C X{Qp) in an effectively computable finite 
subset of Qp. For this, we analyze the possible values of the local height pairings 
hq{{P) — {oo), (P) — (cx))) for q 7 ^ p and P G W(Z[l/p]), and use that by construction 

(2.4) p(P) = -^h,((P)-(oo),(P)-(cx))) 


for P e W(Q). 
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To ease notation, we will only deal with a single prime q and omit it from the 
notation whenever possible. Following [5, §3], we let X denote a strong desingular- 
ization of the Zariski closure X' oi X x Qg over Spec(Zg). By the latter, we mean 
the scheme defined in the weighted projective plane P|^ ( 1,5 + 1, 1) by the equation 

Y^ = F{X,Z), 

where F{X, Z) is the degree 2g + 2-homogenization of /. By abuse of notation, the 
section in A’(Zg) corresponding to a point P S X(Qg) will also be denoted by P. 
Our assumptions on / guarantee that X' is normal with irreducible and reduced 
special fiber. Hence there is a unique component of the special fiber of X which 
dominates the special fiber of <+', and any P G X(Qg) whose reduction modulo g is 
nonsingular has the property that the section P intersects this component. Let ( . ) 
denote the rational-valued intersection multiplicity on X. For a divisor Z on X x Qg 
of degree zero, we let ^{Z) denote a vertical Q-divisor on X such that Z-\-^{Z) has 
intersection multiplicity 0 with all vertical divisors on such a Q-divisor always 
exists by [30, Theorem III.3.6]. Then, by the proof of [5, Proposition 3.3], we have 

(2.5) hq{{P) - [oo), {P) - (oo)) = -{Dp . Dp) logp(g), 
where 

(2.6) Dp = (P) - (cx)) + $((P) - {oo)) G Div(T’) (g) Q, 

with the abuse of notation introduced above. Here the self-intersection is defined 
with respect to the choice of tangent vectors mentioned above; see the proof of [5, 
Proposition 3.3] and [26, §5] for further details. 

Let T{q) C Q denote the set of all self-intersections Df, = {Dp . Dp), where P 
runs through U{'Lq). 

Lemma 2.4. (i) The intersection multiplicity Up only depends on the fiber of 

Xq which the section P intersects. 

(a) If T{q) {0}, then the special fiber Xq is reducible or q divides the leading 
coefficient of f. In particular, T{q) = {0} if q is a prime of good reduction. 
(Hi) If qi,... ,qi are the primes q for which T{q) {0}, then 

p{U{'L[l/p\)) C |^djlogp(g0 : di G T{qi) 

U=i 

Proof. For the first two statements see the proof of [5, Proposition 3.3]. The proof 
of (iii) follows from (2.4) and (2.5). □ 

In particular, the value of p at a p-integral point P on X is completely determined 
by the intersection multiplicities Dp q G Q for primes q of bad reduction and these 
rational numbers do not depend on p! We encode this global data as follows: 

Definition 2.5. We call a prime q very bad for X if T{q) {0}. Suppose that 
q\ < q 2 < . ■. < qi are the very bad primes for X. We call a tuple 

(di,...,d,) eQ^ 

an intersection pattern if di G T{qi) for all 1 < * < £. Let V denote the set of 
intersection patterns; this set is finite by Lemma 2.4. We say a point P G U{'L\l/p]) 
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has intersection pattern d = [di,... ,dt) G V, if D^p = di for i G 
Moreover, we define a p-adic logarithm map log^: 'P —Qp by 

n 

logp(d) ='^d^logp{q^). 

i=l 

If there are no very bad primes, then we set V = {1} and accordingly logp(P) = {0}. 

With this notation, the following result follows immediately from Lemma 2.4: 
Corollary 2.6. Let T logp(P) C Qp. Then we have 

pmi/p])) c T. 

3. Algorithms for quadratic Chabauty 

Building on the theory described in the previous section, in this section we discuss 
how to use Theorem 2.1 to p-adically approximate integral points in practice. In 
§§3.1 — 3.4 we give algorithms to compute the set T and each of the quantities in 
the equation giving the function p{z): 

(3.1) p{z):=t{z)- a^jJ^{z)fjiz)=leT. 

Finally, in §3.5, we discuss how to compute the solutions in lL{Zp) to (3.1). By 
Theorem 2.1, the set of solutions is finite and will contain the integral points on X. 
We will henceforth assume that p is a prime of good ordinary reduction. 

3.1. Computing the The first step is to express the global p-adic height 
function as a Qp-linear combination of a natural basis of the space of Qp-valued 
quadratic forms on J(Q) (8iQ. To do this, we need independent non-torsion points 
Pi,Pg G J(Q). In practice we usually have such points available if we know 
that r = g, because the verification of this fact requires bounding r from below, 
typically by finding g independent non-torsion points in J(Q). 

We compute the global p-adic height pairings h{Pi,Pi), /i(Pi, P 2 ), ■ • ■, d{Pg,Pg) 
using [9, Algorithm 3.8]; each p-adic height is a sum of Coleman-Gross local height 
integrals (a precision analysis of which is done in [3, §6]), as well as rational multiples 
of logp(( 3 'i) for rational primes qi (which can be computed to the necessary precision 
using standard methods). 

Next, we check if the set {/o, ■ • ■ i /g-i} gives a basis of the Qp-valued functionals 
on J(Q) 0 Q, or equivalently, if the set 

(3.2) (J(/Jj+/j7.)j 

L ^ J 0<i<j<g-l 

forms a basis for the space of Qp-valued bilinear forms on J(Q) ® Q. We use the 
fact that we have, for each pair (fc, 1), the relationship 

h[p^,Pi) = Y iMPk)fjiPi) + fjiPk)MPi)) 

if (3.2) gives a basis. In particular, by computing the determinant of the matrix 
whose entries are given by [\ {fi{Pk)fj{Pi) + fi{Pk)fi{Pi))) and verifying that it is 
nonzero, we determine that the fi are linearly independent Qp-valued functionals 




COMPUTING INTEGRAL POINTS ON HYPERELLIPTIC CURVES 


9 


on J(Q) (giQ. If the fi aren’t linearly independent, then we instead use the classical 
Chabauty-Coleman method and compute X(Q). 

To set up the linear system relating the global height pairing h to the elements 
in (3.2), we use the computed values of h{Pk,Pi) as well as the values of the sums 
of products of Coleman integrals 

(3.3) liMPk)fAPi) + fAPk)f^iPl)). 

computed as in [6, Algorithm 11] to recover the aij. 

We postpone a discussion of all precision concerning Coleman integrals to §3.3. 
The precision of the integrals present in (3.3) is discussed in Proposition 3.3. 

3.2. Computing fi{z). The Coleman integral 

fi{z) = UJi 

J OO 

of a regular 1-form uii is computed as a power series expansion for each residue disk. 
We compute the set of residue disks, then for each residue disk, do the following: 

(1) Take a lift of the residue disk to a point P £ U^Zp). In particular, if 
working in a Weierstrass residue disk, take the lift to be the characteristic 
zero Weierstrass point; else, take an arbitrary lift. 

(2) Compute fi{P) = ^ I-p^i using [6, Lemma 16], which sets the 

global constant of integration and reduces the computation of fi{z) to that 
of a tiny Coleman integral. 

(3) Take z to be a local coordinate in the disk of P and break up the path 
between oo and z using 



— fiiP) + J 


which allows Jp uji to be computed as a tiny Coleman integral, as in [6, 
Algorithm 8]. 

Computing fi{P) requires the precision given in Proposition 3.3. 

3.3. Computing r. We begin with the observation that the local component of 
the p-adic height at p, 

t{z) = hp{{z) - (oo), (z) - (oo)), 

can be expressed as a sum of double Coleman integrals [5, Theorem 2.2]: 



where bo is a tangential basepoint at infinity, as in [5, §2]. Then computing the 
p-adic power series t(z) amounts to 

• computing the value t{P) for an arbitrary point P £ U{Zp) to set the global 
constant of integration and 
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• fixing a lift of Frobenius computing the the action of (p on the first 
Monsky-Washnitzer cohomology of an appropriate affine piece of the curve, 
which yields the analytic continuation of the double integral to each of the 
other residue disks not containing P. 

In practice, what is computationally easier is to compute the set of residue disks, 
then for each residue disk, do the following: 

(1) Take a lift to a point P S U{'Lp) (if P is in a Weierstrass disk, take the lift 
to be the characteristic zero Weierstrass point; else, take an arbitrary lift) 
and compute t(P), setting the constant of integration. 

(2) Compute the dual basis {wi} C W for ujq, ■ ■ ■, with respect to the cup 
product pairing. This is done by 

(a) first computing, for j = g,... ,2g — 1, the differentials tUj, which are 
the projection of the ajj on W along the space of holomorphic forms. 
Using the cup product matrix, this gives each wq, ... ^g-i as a Q-linear 
combination of ajg,, L 02 g-i- 

(b) Then we compute the projection of ajg,... ,cu 2 g-i with respect to the 
basis {wo; • ■ •) Wg_i, Wg,... (b 2 g-i}- The linear algebra allows us to write 
each ajg ,..., W 2 g-i, and consequently, each wq, .. • Wg_i as a sum in¬ 
volving a Qp-linear combination of {wqj ■ • ■, Wg_i}, together with a 
Q-linear combination of the {wg,..., aj 2 g-i}. 

(3) Compute the double integral for t(z) as a power series in z using t{P); in 
particular, the relevant double integrals from P to z are computed as tiny 
integrals within that disk, using the fact that 



The tiny double integrals are computed as in [2, Algorithm 5.1]. 

We now compute the necessary precision for each local height and Coleman 
integral discussed in this section. We begin by recalling the statement of Proposition 
18 of [6], very slightly adapted to fit our purposes: 

Proposition 3.1 (Proposition 18, [6]). Let fp oj be a tiny integral in a residue disk 
not equal to the disk at infinity, with P,Qg U{'Lp) accurate to n digits of precision. 
Let {x{t),y(t)) be the local interpolation between P and Q and oj = g(x,y)dx a 
differential of the second kind such that h(t) = g{x(f),y(t)) belongs to Zp[[t]]. If 
we truncate h{t) modulo then the computed value of the integral fp oj will be 
correct to min{n, to -|- 1 — [log(TO -|- 1)J } digits of precision. 

The corresponding statement for tiny double integrals easily follows: 

Corollary 3.2. Let fp ajp he a tiny double integral in a residue disk not equal 
to the disk at infinity, with P,Qg U(Zip) accurate to n digits of precision. Let 
{x{t),y(t)) be the local interpolation between P and Q and aj f rj = g{x,y)dx a 
differential of the second kind such that h[t) = g(x{t),y(t)) belongs to Zp[[f]]. If 
we truncate h{t) modulo f™, then the computed value of the integral fp corj will be 
correct to min{n, to -|- 1 — [log(TO -|- 1)J } digits of precision. 

As a special case of [6, Proposition 19], we have 
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Proposition 3.3. Let oj be a Coleman integral of uj a differential of the first 
kind or a differential of the second kind without poles in the disks of integration. 
Suppose P,Qg lAifLp) are in non-Weierstrass residue disks and given accurate to 
n digits of precision. Let Frob be the matrix of the action of Frobenius on the basis 
differentials. Set B = Frob*" — I 2 gx 2 g tet mi = Vp{det{B)). Then the computed 
value of the integral fp ui will be accurate to n —max{mi, \\ogn\} digits of precision. 

Proof. The Coleman integral is computed via a linear system, where the quantities 
involved are an inverted matrix B~^ times a vector of constants involving tiny 
integrals and integrals of exact forms evaluated at points. Suppose the entries of B 
are computed to precision n. Then taking B~^, we must divide by det(i?), which 
lowers the precision by mi = Vp{det{B)). By Proposition 3.1, computing tiny 
integrals with the series expansions truncated modulo gives a result precise 
up to n — [lognj digits. Thus the value of the integral /p w will be correct to 
n — maxjmi, [lognj} digits of precision. □ 


Finally, we discuss precision of local height integrals: 


Proposition 3.4. Let P = {a,b) G U{'Lp) be a point accurate to n digits of 
precision. Let t{P) be the local height pairing at p of (P) — (oo) with itself. 
Let Frob be the matrix of the action of Frobenius on the basis differentials. Set 
B = Froo — I 2 gx 2 g o-nd let mi = Vp{det{B)). There exists an algorithm to compute 
t{P) to n —max{mi, [lognjj digits of precision. 


Proof. Let a 2 g+i denote the leading coefficient of the polynomial / defining X. 
Suppose P is a Weierstrass point. Then by [5, Lemma 4.1], we have t{P) = 
i(logp(/'(a)) + logp(a 2 g+i)), and we are done. 

Now suppose P is a non-Weierstrass point. We discuss the precision, mostly 
in terms of local coordinates, necessary to compute t(P) to n — max{mi, [lognjj 
digits of precision. Throughout, we recall formulas given in [5, §4] and [3, §6]. 

We begin with the following equation for r(P) from [5, §4]: 


r(P) 


^(logp(46^) +21ogp(a2g+i)) + i 


bdx 


u{p) y[x - a) 

(3.5) 


\ 



/ 


where ry is the holomorphic projection of the differential computed from 

the splitting (2.1). Computing Coleman integrals as in Proposition 3.3 gives the 
integral of ry correct to n — maxjmi, [lognjj digits of precision. 

The integral /^^pj y(x-a) somewhat more delicate to analyze, since it is the 
Coleman integral between two different residue disks of a differential form with 
poles at both of its endpoints, P and w{P). To compute it, the strategy is to break 
up the path to produce two slightly simpler integrals: the sum of 

• a tiny integral of a differential form with precisely one pole at an endpoint, 
which can be computed by normalizing the resulting integral with respect 
to a choice of cotangent vector and 

• a Coleman integral between two different residue disks with poles within 
the disks of integration (but away from the endpoints). 
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We begin by breaking up the path from w{P) to P using an arbitrary point Q 
(distinct from P) in the disk of P: 


b dx 


rQ 


b dx 


b dx 


„(P) y(x - a) 


w{p) yix - a) 
bdx 


Iq y(x-a) 


bdx 


lw{Q) y{x - a) 
bdx 


Iq yix-a) 
bdx 


bdx 


u{Q) 


y{x-a) Jq y{x-a) Jq y{x - a)' 


which gives 
(3.5) 


/ 

J W 


bdx 


rQ 


(P) y{x - a) 


= -2 


b dx 


bdx 


'p yix-a) 


lw{Q) 


y{x - a) ' 


(3.6) 


(3.7) 


The integral (3.6) is now a tiny integral, but it still has a pole at one of its endpoints, 
P. Let z = be the normalized parameter at P, used to normalize the integral, 
as in [5, §4]. Writing in terms of this parameter yields a Laurent series 

expansion of the form {z~^ + oq + aiz + ■ • • )dz, because ^ simple pole 

with residue 1 at P. The normalized integral y{x-a) normalized integral 

of y{x-a) evaluated at Q; in particular, the normalization gives that the constant 
term of the integral with respect to z is 0, which lets us write it as 


bdx , / N oi 2 

Jp + +■■ 

Changing to the parameter t = {x — a) = 26z, we obtain 


z=z(Q) 


bdx 


Ip yix-a) 


(3.6) 


iog,w«) - iog,(2i.)+- *-■) dt. 


Since the precision of this last integral is found by computing a truncation of the 
tiny integral modulo where to' —log(m') > n, the value of (3.6) will be correct 
to n digits of precision. 

Finally, the integral (3.7) can be computed as discussed in [5, §4.2]. We recall 
the formula [5, (4.4)] used to evaluate it: 


(3.7) 

rQ 


b dx 


lw{Q) yix-a) l-p 


(a) U 4'(/3) + ^ Res^ 
^ Aes 


bdx \ 

Q yix - a) y ’ 


where a = (j)* ^ y^^-a) ) “ P \ y{x-a) ) i /3 is a differential form with residue divisor 

iQ) — iwiQ)), S is the set of closed points on X x Qp, and 4>(^) is the logarithm of 
a differential ^ as in [3, Prop 2.3], where the map 41 takes a differential of the third 
kind to a differential of the second kind modulo exact differentials and is computed 
using dehnite Coleman integrals of a basis of i7jj^(X). 



























COMPUTING INTEGRAL POINTS ON HYPERELLIPTIC CURVES 


13 


Note that the differential a is chosen so that it is “essentially” of the second kind, 
so that within each residue disk, the residue along a sufficiently narrow annulus at 
the boundary of the disk is 0; for further details, see [3, Remark 4.9]. We have that 
'l'(a) and 'I'(/3) have precision prescribed by definite Coleman integrals of a basis 
of that is, computing the Coleman integrals as in Proposition 3.3, this is 

n —maxjmi, [lognj}. 

For R-es(a f /3), we have three cases: 

(1) A finite Weierstrass, 

(2) A non-Weierstrass and not in residue disks containing the support of the residue 
divisor of /3, 

(3) A non-Weierstrass and in disks containing the support of the residue divisor of 
/3. 

Case (1) is the most straightforward. To compute ResA(a / /3) to n digits of p- 
adic precision, by [3, Proposition 6.5], we need to compute the local coordinate at 
A, {x{t),y{t)) to The dependence on p in the exponent arises from 

analyzing the contributing terms in a t-adic expansion of a, which amounts to a 

binomial expansion of (f)* where (t>{x) = x^. For case (2), suppose A is 

defined over a degree d extension K/Qp and we have a working precision of n digits, 
so that A has precision dn in terms of a uniformizer tt of iF. As in [3, Corollary 
6.4], let m" be such that dm" + 1— [log(dm"-|-l)J > n. Then computing (3 in terms 
of a local coordinate {x{t),y{t)) at a point B in the disk of A defined over Qp, we 
have that /3 can be truncated modulo for J2ua I^6s(q: J /3) to be correct to n 
digits, where Ua is the residue disk containing A. For case (3), we use [5, Lemma 
4.2] to first rewrite / /?, and then use the truncation in case (2). 

Lastly, we analyze the precision of v{x-a) • opportunity to 

make a small correction to the discussion above [5, Lemma 4.2]; indeed, the same 
technique described in [5, Lemma 4.2] is also used to compute this integral, since 
the residue divisor of construction, Q, 4’{Q), and P 

are all in the same residue disk. So by computing the integrand in terms of a local 
coordinate at Q and truncating modulo as above, we have that the integral will 
be correct to n digits of precision. □ 

3.4. Computing the intersection patterns. We now discuss the computation 
of a set T C Qp which contains the values of p on p-integral points. By Lemma 2.4, 
it suffices to compute the set V of intersection patterns, since we can take T = 
logp('P). Hence we compute the sets T{q) of possible values of D'^p^ (see (2.6)), as 
P runs through U^Zq), where q is a prime of bad reduction. In fact, it follows from 
Lemma 2.4 that it suffices to do this for g = 2 and for primes q which divide the 
leading coefficient of / or satisfy ?;g(disc(/)) > 2, since all other primes are not very 
bad. 

So let q be such a prime; we will omit it from the notation in the following. We 
first compute a strong desingularization X of the Zariski closure of A x Qg over 
Spec(Zg). Suppose that, as a divisor, Xq is given by oJj, where Fi,..., F„ 
are the irreducible components of Xq and ai,...,a„ are positive integers. For 
i,j G {!,...,n} let = (aiFi.ajFj), so that M = (rnij)ij is the intersection 
matrix of Xq. Let M+ denote the Moore-Penrose pseudoinverse [33] of M. 
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Recall the adjunction formulas on Xq. K. & Div(d:’) 0 Q is a canonical Q- 
divisor on X (meaning 0(/C) is isomorphic to the relative dualizing sheaf of X over 
Spec(Zg)), then we have 

(3.8) {lC.T,) = -Tj + 2p,{Ti)-2 

for all i, where Pa(J^i) denotes the arithmetic genus of 

For P £ U{1iq), we now give simple formulas for Dp in terms of linear algebra on 
the special fiber Xq. Recall from [5, Lemma 3.4] and the proof of [5, Proposition 3.3] 
that if P £ X{Qq), then Dp is given by 

(3.9) Dp = ^((P) - (oo))^ - (P. divA'(wo)) - (oo . diva’(wg_i)). 

We consider each term on the right hand side of (3.9) individually, drawing on 
and extending [5, §5]. As these terms only depend on the component that the 
section P intersects, we can compute T{q) by computing them for each component 
of multiplicity 1 . 

3.4.1. Computing ‘b((P) — (oo))^. Let u{P) denote the column vector whose ith 
entry is ((P) — (oo). a^Fj). Then we have 

(3.10) 4>((P) - (oo))^ = uiPfM+uiP). 
by [5, (5.3)]. 

3.4.2. Computing (P. div;f(a;o)). Recall from [5, §5.1] that 

divAf(u;o) = (2g - 2 )oo + V , 

where V is vertical. As P £ lA(%q)^ the section associated to it does not intersect 
the section oo, so it follows from [5, §5.1] that 

(3.11) (P. div;t(wo)) = (P. R) = (P. R'), 

for such a point P. Here R' is the unique vertical Q-divisor such that {2g — 2)oo + 
V is a canonical Q-divisor and such that the support of V is disjoint from the 
component Fq. Writing V' = ^ therefore suffices to compute 

the column vector v' = {vp ... . 

Suppose that F^p dominates the Zariski closure of X and that the section 00 
intersects F^^^, where io; *00 S {1,..., n}. Then v' can be computed as follows: Let 
b denote ( 61 ,..., 5„)*, where 

b, = -F^ + 2pa(F0 -2-{2g- 2 )(oo . F,). 

By (3.8) we have 

v' = M' ■ b, 

where M' is the matrix obtained from M by setting the ioo-th row and column 
equal to 0 . 

3.4.3. Computing ( 00 . div;f (wg-i)). The divisor of the function £ Qp{X) is 
equal to {g — l)Do — {2g — 2)(oo), where Dq = (Pq) -I- {w{Po)) £ Div(A (g: Qq) for 
a point Pq £ A(Qg) with a:-coordinate 0. Thus we have 

divA'(wg_i) = {g- l)Do + W 

for some vertical divisor IR. In analogy with (3.11), we have 
(00 . diva'(wg_i)) = (00 . IR) = (00 . VF'), 
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where 

n 

W' = 

i=l 

is the unique vertical Q-divisor such that {2g — 2 )Dq + W is a canonical Q- 
divisor and such that the support of W is disjoint from the component Fq. If 
c = (ci,..., Cnf is defined by 

c. = -r2 + 2pa{Ti) -2-{g- l)Do . Fi), 
then it follows from (3.8) that 

{w'l, ■. ■ ,w'^f =M' -c. 


3.5. Computing the solutions to p{z) G T. Here we describe how to find all 
p-adic solutions to p{z) S T in U{Zp) to precision . 

(1) We begin by enumerating the list of residue disks not including the disk at 
infinity: that is, the set ^(Fp) \ oo. 

(2) Compute the dual basis {wi}. 

(3) Initialize sets Z = 0 and Z = 0. 

(4) For each disk, we do the following: 

(a) If the disk is Weierstrass, we take P to be the characteristic 0 Weier- 
strass point in the disk. If the disk is not Weierstrass, we take P to 
be an arbitrary lift to Zp of the Fp-point. 

(b) Compute t(P), a local coordinate {x{z),y{z)) at P, and fi{z),T(z) as 
in §§3.2-3.3. 

(c) Use the values of Oy as computed in §3.1 to produce the power series 
expansion 


(3.12) p{z) 



- 

0<i<j<g-l 


(d) For each value oi t G T, solve the equation p{z) = t (mod p^). For 
each Zi such that p{zi) = t (mod p^), check whether p'{zi) = 0 
(mod p^). If p'{zi) ^ 0 (mod p^), use the local coordinate at P 
to find the corresponding p-coordinate of the point on X in the disk 
with x-coordinate x{zi) and append ((x(zj),p(zj)), 1) to the set Z. If 
p'{zi) = 0 (mod p^), approximate m = ord^^^^ p{z) using our work¬ 
ing precision and append {(x{zi),y{zi)),m) to the set Z. 


4. Complementing quadratic Chabauty 

Using the algorithms described in Section 3, we can compute a hnite set of p- 
adic points on X which contains the set IA{'L) of integral points on X, provided the 
conditions of Theorem 2.1 are satisfied. More precisely, we can compute the set V 
of intersection patterns, and we can find all solutions z G U{'Lp) to the equations 

(4.1) p{z) = \ogp{d), dGV 

to N digits of precision. Theorem 2.1 implies that the set of solutions will contain 
the set of integral points on X. 

For every solution z to (4.1), there are three possible scenarios: 

(a) z lifts to a point in U{'L), 

(b) z lifts to a point in X (Q) \ U (Z), or 
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(c) z does not lift to a point in X (Q). 

In cases (a) and (b), it is usually trivial to find the corresponding rational point. 
The reason is that because of our assumption (/ > 1, we do not expect X(Q) to 
contain any points of large height. So quadratic Chabauty leaves us with a list of 
integral points A <ZU (Z), and we want to prove that this list is complete. 

There are essentially two problems we have to solve. The first one is caused by 
the fact that we only compute our solutions to our finite working precision . 

Problem 1. Given a solution Zq lifting to a point Pq g -^(Q), we have to show 
that there are no integral points ^ Pq congruent to Zq modulo p^. 

If the power series expansion of p — t in the residue disk containing zq only has 
a simple zero at zq, then we are obviously done. 

So suppose that ordz^^j, p(z) — t = m > 1. In practice, our approach is to simply 
increase precision until zq separates into m different points. If this does not work 
for reasonably small precision then we are in one of the following two cases: 

(i) Zq really occurs as a multiple solution of p(z) — t. 

(ii) Zq is p-adically closer than p^ to another point which satishes p(z) — t = 0. 
In case (ii), we will of course detect this by increasing precision, though we have 
no a priori bound on when to stop (if zq is integral, we could derive an enormous 
bound using linear forms in logarithms, but this would not be practical). However, 
neither (i) nor (ii) occurred in our examples, and we do not expect this to occur in 
practice. 

Here is a heuristic explanation for this: If the original expansion of p in the disk of 
Zq did not use zq as a basepoint, recompute p{z) = t at zq. Call F{z) = p{z) — t. To 
state the simplest case of the problem, suppose we are trying to resolve a potential 

double root; that is, our expansion of F yields F{z) = a 2 Z^H-: Either we actually 

have a double root at zq or oi is p-adically too small to show up as a coefficient of 
the power series, given our working precision. Note that each element of the dual 
basis uJi is a Qp-linear combination of the g regular 1-forms (from the projection 
along the unit root subspace, using Frobenius) and a Q-linear combination of the 
g meromorphic 1-forms {wg,.. .u} 2 g-i} (from the cup product matrix). So, using a 
certain choice of cotangent vector bo where necessary, as in [5, §§2 — 4], we have 


F{z) := p{z)-t 





^0 2^0 j—g ^ i—0 j—0 0 <z<j< 5 —1 


0<i<j<g-l 


= {qiz -f q2z'^ H-) -f (siz -f S2Z^ H-), 

where the first power series has rational coefficients qi (the sums of Q-linear combi¬ 
nations of double integrals which are computed using a local coordinate expansion 
at the integral point zg) and the second power series has p-adic coefficients Si. This 
means that F{z) has linear coefficient 0 or very close to 0, that is, either qi = si 
(and that si is actually a rational number) or gi — si ^ 0, or that si ~ gi, that is, 
Si is very close to a rational number, both of which are scenarios that seem highly 
unlikely. 
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So Problem 1 should not lead to any practical difficulties. However, there is a 
much more serious obstacle we have to overcome. 

Definition 4.1. Let denote the set of solutions to the equations (4.1) which do 
not lift to a Q-rational point to our working precision. 

As we do not expect any Q-rational points of large height, we have to solve the 
following problem. 

Problem 2. Show that no element of JFp lifts to an integral point. 

By the discussion above, it suffices to solve Problem 2 in order to provably find 
all integral points on X. So how can we attack Problem 2? This question will be 
answered in Section 6, after we establish the basics of the Mordell-Weil sieve in the 
next section. 


5. The Mordell-Weil sieve 

From now on, we suppose that the genus g of X is at least 2. We recall the 
Mordell-Weil sieve, a method to obtain results on rational points of A1(Q) using 
information about J(Q) and information over finite fields. It was developed by 
Scharaschkin in his PhD thesis [38] and adapted and applied to great success by a 
number of authors, for instance Flynn [23], Poonen-Schaefer-Stoll [37] and Bruin- 
Stoll [14, 16]. The Mordell-Weil sieve is particularly useful for proving that A'(Q) is 
empty, but it has many other applications as well, see [16, §4.2]. In our discussion 
we follow [16]. 

The general idea is as follows: Let M be a positive integer and let 

J(Q) ^ J(Q)/MJ(Q) 

be the canonical epimorphism. Suppose that Cm C J{Q)fMJ{Q) is a set of residue 
classes for which we want to show that no rational point P € A'(Q) maps to Cm 
under not,. In the simplest case we pick a prime v of good reduction and consider 
the following commutative diagram: 

X{Q) J(Q)/MJ(Q) 


X(F„) J(F„)/MJ(F,) 

Here is induced by the reduction map J(Q) —>■ J(F„) and /3„ is induced by 
l: X(F.„) ^ J(F„). If Uv^Cm) n /?„(X(F„)) = 0, then we are obviously done. 

More generally, we can apply this argument to several primes of good reduction 
at once: Let S' be a finite set of such primes and consider the commutative diagram 

X{q) -^ J(Q)/MJ(Q) 

as 

n„e5 ^ n.es ^(F.)/MJ(F.) . 

Then it suffices to show that 

as(CM)n/3s ( =0- 

\v&S / 
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In other words, we want to find S such that 


(5.1) 


A{S, Cm) = Ice Cm- as(.c) G /3s H 


\vGS 


is empty. Heuristically, we can estimate the size of A{S,Cm) as follows: For a 
prime v of good reduction, we denote by Xm,v = Pv{X{¥y)) the image of X(F„) in 
J(F„)/MJ(F„) and we set 


7(u,M) 


#J(F,)/MJ(F,)- 


Note that v can only be useful for our purposes if ■yiv.M) < 1. The expected size 
of A{S, Cm) is 


(5.2) n{S,CM) = #CMl[liv,M), 

ves 


so we want n{S, Cm) to be small. 


Remark 5.1. In addition to choosing S, we can of course also increase M by 
taking some multiple M' of M and constructing the set Cm' C J{Q)/A['J{Q) of 
residue classes which map to Cm via the Chinese remainder theorem. It seems very 
difficult to prove that there are choices of S and M' so that this approach will show 

7r(i(X(Q))) n Cm = 0 

as desired, so that at present the Mordell-Weil sieve is not known to be effective. 
See Poonen [36] for related heuristics, which predict, in particular, that such a 
choice should always exists for curves that have X(Q) = 0. 

We refer to Bruin and Stoll [16] for a thorough discussion of practical aspects 
of the Mordell-Weil sieve. We finally mention that it is also possible to use primes 
of bad reduction and “deep” information for the Mordell-Weil sieve, but we have 
not tried to use this for our purposes. See [16] on a description of these ideas for 
genus 2. 

The practicality of the Mordell-Weil sieve is discussed in [16, §§7-8]. Essentially, 
two problems can arise. First, the set A{S,Cm) can become too large. Secondly, 
the computation of the images of the sets W(F„) in J(F„) can become infeasible. 
The latter can occur because that computation requires approximately v discrete 
logarithms in the group J(F„). We can avoid this issue by only considering primes 
such that # J(F„) is sufficiently smooth, meaning that it has no large prime divisors, 
as in this case we can apply Pohlig-Hellman reduction [35], so that only a small 
number of relatively easy discrete logarithms have to be computed. 


6. Combining quadratic Chabauty and the Mordell-Weil sieve 

Now we show how quadratic Chabauty can be combined with the Mordell-Weil 
sieve to provably compute all integral points on X, where we assume X to have 
genus at least 2. See Appendix A for a brief discussion of the genus 1 case. 

Recall that in Section 3 we discussed algorithms to compute a finite subset 
of 7/(Zp) to N digits of precision which contains the set 77(Z) of integral points, 
provided the conditions of Theorem 2.1 are satisfied. Having identified some of 
these p-adic points as actual rational points, we showed in Section 4 that in order 
to provably compute all integral points, it suffices to solve Problem 2: We need 
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to prove that the set Tp of remaining p-adic points do not lift to integral points. 
In fact, we will discuss how to prove that they do not lift to rational points by 
translating this into a problem that we can solve using the Mordell-Weil sieve. 

For simplicity, we first assume that the torsion subgroup of J(Q) is trivial and 
that we have generators Pi, ■ ■ ■ ,Pg of J(Q) available. See Remarks 6.1 and 6.2 on 
how to remove these assumptions. 

Suppose that z G U{'Lp) is accurate to N digits of precision. If z lifts to rational 
point P G ^(Q), then there are integers ai,..., Og such that 

(6.1) ^(P) = oiPi + ... + agPg. 


By properties of the Coleman integral, this implies 






UJi + ■ ■ ■ + ttg 



Ui 


for alH € {0,..., g — 1}. 


Let (di,..., dg) G 1/p^Ij be defined by 


( 6 . 2 ) 


«i \ ( fpi^o 

\ / \ /pi ^9-1 


/ p „ ^ 

-1 

£“0 ) 





Note that if (6.1) holds, then we must have Ui = dj (mod p^) for alH G {1,..., g}. 

So, if we are given z as above, and we want to prove that z does not lift to a 
rational point, we compute (di,..., dg) G noting that if d is the valuation 

of the determinant of the matrix we are inverting, we need its entries to precision 
pN+d^ Then it suffices to show that there is no tuple (oi,..., Og) G Z® such that 

(i) Qi = di (mod p^) for all i G {1,... ,g}, and 

(ii) oiPi + ... + OgPg is in the image of X(Q) in J(Q) under the embedding t. 
The tuple (di,..., dg) induces a residue class c G J(Q)/p^ J{Q) via 


c — diPi + ... + dgPg] 


we say that c corresponds to z. 

Then, denoting by tt: J(Q) —>■ J{Q)/p^J{Q) the canonical epimorphism, we 
want to show that there is no point P G X (Q) whose image under tt o i maps to 
the residue class c in J{Q)/p^J{Q) corresponding to z - which is precisely the 
type of problem the Mordell-Weil sieve is likely to solve! We set M = p^, let 
Cm C J(Q)/MJ(Q) denote the set of residue classes corresponding to elements of 
Pp and look for a set S of primes of good reduction such that ^(5", Cm) = 0, where 
A{S,Cm) is dehned in (5.1). 

Unfortunately, as stated, this approach is not likely to succeed in practice. The 
reason is that for M a prime power the set ^(5*, Cm) is unlikely to be empty, as we 
cannot expect ^J(F„) to be divisible by p for many small primes v. Of course, we 
can simply take a multiple M' of p^ as discussed in Remark 5.1. However, we would 
like to apply our method to curves of genus (and hence rank) at least 4, so this 
strategy would likely lead to large sets A{S', C'^). Moreover, the discrete logarithms 
needed to compute the images of X(F„) in J(F„) would become infeasible, since the 
shape of M would force us to consider primes v such that ^J{¥y) has large prime 
divisors and the computation of discrete logarithms (in fact explicit computations 
in J(F„) in general) becomes slow as g and v become large. 
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Fortunately, it turns out that we can actually do much better. Namely, we 
use the following strategy: We combine the information coming from quadratic 
Chabauty for several primes of good ordinary reduction pi,... ,ps to Ni,... ,Ns 
digits of precision, respectively. Let m be a small integer coprime to the pk and set 

(6.3) M = m-p^^ ■■■p^‘. 

If P S U{T,), then there is an intersection pattern d G V such that we have 
PpkiP) =logp,, (d) for all fc e {!,..., s}. 

We can partition J-p^, into subsets 

= Ppk n Pp^ilogp^ (d)), 

where d runs through P. For an intersection pattern d, we define to be the set 
of residue classes c S J(Q)/MJ(Q) such that c corresponds to an element of 
for every k G {1,..., s}, without any condition modulo m. Finally, we set 

(6.4) Cm ■■= U Cd 

dev 

and apply the Mordell-Weil sieve with these choices of M and Cm for some set S 
of primes of good reduction so that ^(5”, Cm) is likely to be empty. 

Remark 6.1. If there is nontrivial rational torsion on J, then we have to replace 
Cm by the set of all classes c + Q G J{Q)/MJ{Q), where c G Cm and Q runs 
through J(Q)tors \ {O}. This increases the size of Cm, but otherwise does not 
cause any problems. 

Remark 6.2. If the points Pi only generate a subgroup of finite, but unknown 
index, then it suffices to show that this index is coprime to all u G S' used in 
the Mordell-Weil sieve computation a posteriori, because then {Pi,... ,Pg) and 
J(Q)/J(Q)tors have the same image in J(F„). 

7. Choosing the parameters for quadratic Chabauty and the 

Mordell-Weil sieve 

The previous section described a general approach to combining quadratic Chabauty 
with the Mordell-Weil sieve in order to provably compute all integral points on X. 
Now we discuss how to make this practical. To this end, we need to establish how to 
choose the various parameters for the Mordell-Weil sieve and quadratic Chabauty 
computations. More precisely, we need to choose 

• the primes pi,... ,ps of good ordinary reduction, 

• the numbers Ni,..., Ng of digits of precision, 

• the integer m, 

• the set S of primes of good reduction, 

so that the set A(5', Cm) has a good chance to be empty, where M = m-p^^ ■ ■ ■ p^^ 
and Cm is dehned in (6.4). If we can then show that A{S,Cm) is indeed empty, 
we have proved that our list of known integral points is complete. To this end, we 
will make all the choices listed above at the same time, as opposed to choosing the 
Pk, the Nk and m a priori and then looking for a suitable set S. 

With notation as in Section 5, the expected size of the set A{S, Cm) is 

n{S,CM) = #CM\{l{v,M). 

v^S 
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We would like to find S and M, so that n{S, Cm) is small, where Cm is as in (6.4), 
before we actually start the quadratic Chabauty computations. 

So suppose we have candidate S and M. It is straightforward to compute 7 ( 1 ;, M) 
for given v and M, see [16, §3]. However, the size of Cm is given by 

S 

#Cm = #J{Q)tois/MJ{Q)tors ■ ■ ^2 n ^^Pk,d- 

dev k=l 

Hence we cannot compute ij^CM without already knowing the sizes of the sets 
J^Pk,d for the various d € V. But these sets come out of the quadratic Chabauty 
computation for pkl So instead, we settle for an integer 6[Cm) such that we expect 

#Cm < 0{Cm) 

to hold, using the following strategy: 

We first compute the very bad primes and the set V of intersection patterns. 
Then we find all small integral points on X, say of logarithmic height at most 
H 2 . For every such point P, we use (2.4) to hnd the element d € V such that 
PpkiP) = logpjj^((i) for all primes pk- Let ad denote the number of known integral 
points corresponding to d; this can be computed easily once we have computed the 
regular models X as in Section 3.4. Experimental data suggests that we should 
expect at most two solutions to the equation 

Ppk {z) = logp^ (d) 

in every affine residue disk. So we expect 

dev 

and hence #C'm < ^{Cm), where 

0(Cm) = #T(Q)tors/MJ(Q)tors ' #J(Q)/mJ(Q) • En (2 • #X(FpJ - 2 - ad) 

d^V 

Thus we expect the size of A{S, Cm) to be at most 
(7.1) n'{S,CM)=e{CM)-X{l{v,M)- 

ves 

So our goal is to hnd S and M as above such that n'{S, Cm) is small. Our approach 
to this is as follows: 

(a) Fix positive constants e and Hi, let pi,... denote the primes < Bi of good 
ordinary reduction, and set H = 0 . 

(b) Append primes v of good reduction to S such that #J(F„) is divisible by at 
least one prime pk and only has prime divisors below some chosen bound, and 
such that we have n'{S', Cm') < £, where 

• M’ = = m' • • ■p^'^, 

• IIdgS '7(®''!)) — 'LjMx'L X • • • X Z/MiZ, and 

• Mj I Mg+i for j = 1 ,...,/ — 1 . 

(c) Find M = m ■ p^^ ■ ■ -p^* | M' and S' C S such that n'{S, Cm) < c and such 
that A{S,Cm) can be computed efficiently. 
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This is essentially analogous to the techniques proposed by Bruin and Stoll in [16]. 
In particular, see [16, §3.1] for an argument why M' = is likely to 

yield small values of n{S',C m') and [16, §3.2] for criteria which guarantee that 
A{S,Cm) can be computed efficiently. Their arguments are detailed for the case 
Cm = J(Q)/M J(Q), but can be adapted easily to remain valid in our situation. In 
particular, we restrict to primes v such that the prime divisors of ^ J(F„) are not too 
large to keep the discrete logarithms needed in the Mordell-Weil sieve computation 
feasible. In practice we usually choose Bi ^ 50, so that the quadratic Chabauty 
computations are reasonably fast. Note that usually only small powers of the pk 
will divide some #J(Fi,), so we need only a few digits of p-adic precision. Using 
the strategy outlined above, we can keep a good balance between the size of the 
sets Cm, and a suitable flexibility in choosing S. 

8. A METHOD FOR COMPUTING THE INTEGRAL POINTS WHEN r = g > 1 

We collect the techniques described in this paper into a complete method for 
computing the set of integral points on a hyperelliptic curve with Mordell-Weil 
rank equal to its genus. 

Algorithm 8.1 (Computing the set of all integral points on X). 

Input: A separable polynomial / G Z[a;] of degree 2^ -|- 1 > 5 

• that does not reduce to a square modulo any prime number and 

• such that the Jacobian J of the hyperelliptic curve X defined by = f{x) 
has rank J(Q) equal to g. 

We assume that an explicit set of independent non-torsion points Pi,..., Pg € J(Q) 
is readily available. 

Output: This procedure either computes the set U{1j) of all integral points on X 
or terminates with an error. 


(1) Choose positive integers Bi, B 2 and a positive real number e. 

(2) Compute the rational points on X of height < B 2 and let A denote the set 
of integral points among these. 

(3) Compute the very bad primes and the set P of intersection patterns as in 
§3.4. 

(4) Compute the torsion subgroup J(Q)tors- 

(5) Using the strategy discussed in §7, find a set S of primes of good reduction 

and a positive integer M = m ■ ■ ■ ■ p^’’ such that 

(a) every pk is a good ordinary prime < Bi ; 

(b) gcd(pi ■■■p^,m) = 1; 

(c) we have 

n'(S', Cm) < e, 
where Cm is as in (6.4). 

(6) For every p G {pi,... ,Ps}, do the following: 

(a) Using the estimates of §3, find the working precision p^ needed for 
the results of 7aiii) to be correct to N digits. 

(b) Compute the constants aij as in §3.1. If we find that the functions 
/o,..., fg-i: J(Q) ® Q —>■ Qp are dependent, use Chabauty’s method 
to compute A(Q) and exit. 
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(c) Compute a power series expansion of fi{z) and t{z) in every residue 
disk as in §§3.2 — 3.3. 

(7) For every d gV do the following: 

(a) For every p G {pi, ... ,ps}, do the following: 

(i) Compute the set Z of solutions (with multiplicities) to p{z) = 
logp(d) as in §3.5. 

(ii) If there is a solution Zq G Z with multiplicity > 1 which lifts to a 
rational point, increase the working precision p^ . If N' exceeds 
a pre-determined bound, exit with an error; else go to Step ( 6 b). 

(hi) For every solution z lifting to a point P G W(Z), set ^ = „4 U 
{^}- 

(iv) Compute the residue classes c G J(Q)/p^ J(Q) corresponding to 
the points z G ^pk,d- 

(b) Apply the Chinese remainder theorem to find the set Cd containing all 
residue classes c G J (Q) /M J (Q) such that c corresponds to an element 
of Ppk,d modulo p^’^ for all k. 

(c) For every c' G J(Q)tors/A7J(Q)tors \ {O} and every c G Cd, append 
c + c' G J(Q)/MJ(Q) to Cd- 

( 8 ) Set Cm = 

(9) Compute A(5', Cm) using the Mordell-Weil sieve. 

(10) If A(5, Cm) = 0, then: 

(a) Check if the index (J(Q)/J(Q)tors : {Pi, ■ ■ ■, Pg)) is prime to v for 
every v G S which was used in the Mordell-Weil sieve. 

(b) If yes, return A. 

(c) Otherwise, saturate (Pi, ... ,Pg) at v for every relevant v G S and go to 
Step ( 6 ) with the new points Pi,... ,Pg resulting from the saturation 
process. 

Otherwise, divide e by 5. If e is below a pre-determined bound, exit with 
an error; else, go to Step (5). 


Our implementation of Step (3) crucially relies on Magma’s RegularModels pack¬ 
age, which computes a strong desingularization of the Zariski closure of X. Our 
implementation of the choice of S and M (Step (5)) and of the actual Mordell-Weil 
sieve computation (Step (9)) is based on Magma code of Michael Stoll. See [16, §3.3] 
for a description of the ideas underlying that implementation. The p-adic analytic 
steps in the algorithm were implemented in Sage. 

Regarding Step (10), it often happens that some primes v G S are superfluous 
in the Mordell-Weil sieve computation, so we do not have to check whether they 
divide the index. See [37, §13.7] or [24] where it is explained how to show that a 
certain prime does not divide the index. In practice, we usually expect the index 
to be 1, so we expect Step (10c) to never occur. See [24] for a method that can be 
used to saturate at v when the genus is 2. Alternatively, if we find that some prime 
V that was used in the Mordell-Weil sieve computation divides the index, we can 
try to rerun Step (9) without v. If this fails to show ^(5 \ {u}. Cm) = 0, we can 
go back to Step (5), keeping the same constants Bi and e, but a priori excluding 
all elements known to divide the index from S. 
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9. Examples 

Here we give some examples illustrating the techniques described in this paper. 
We start by finishing the computation of the integral points on a genus 2 curve, to 
which we applied quadratic Chabauty in [5]. Then we compute the integral points 
on a modular curve of genus 3. Finally, we do the same for a curve of genus 4, 
which does not seem to be amenable to any techniques previously available. 

Example 9.1. Let X be the genus 2 curve 

= x^{x - Vf + 1 . 

In [5, §7.2] we showed the following: 

(i) The Jacobian J of X has rank 2 over Q. 

(ii) J(Q)tors = {O}. 

(iii) The points Pi = [(P) — (oo)] and P 2 = [(Q) — (P)] generate T(Q), where 
P = (2,-3),Q = (1,-1),P=(0,1). 

(iv) The only very bad prime is 2. 

(v) We have V = {0, |}. 

We then computed the solutions to p{z) € T at p = 11. Among these solutions, the 
only ones that appeared to be actual integral points were Q, R and their images 
under w. 

Let us now prove that these are indeed the only integral points on X. Note that 
this has been proved already by Michael Stoll using the methods of [17]. We apply 
quadratic Chabauty for the primes pi = 5 and p 2 = 11, to respective precision 
Ni = 4: and N 2 = 6 and run the Mordell-Weil sieve with M = 5^-11® and S = 
{17,863,7193}. After taking out residue classes containing integral points, we are 
left with 209 residue classes in J(Q)/MJ(Q); the Mordell-Weil sieve computation 
then shows that none of the 209 residue classes contain the image of a rational 
point on the curve. This proves that our list of integral points is complete. 

Example 9.2. Let X be the genus 3 hyperelliptic curve 

= {x^ + X + 4){x'^ + 2x^ — 3x^ + Ax -\- A). 

This is the curve C/gg, a new modular curve of level 496 with Q-simple Jacobian 
in the language of [1]. Applying 2-descent as described in [44] and implemented 
in Magma, we find that the Jacobian J oi X has rank 3 over Q. The torsion subgroup 
has order 2, the nontrivial element coming from the factorisation (x^ J- cc J- l)(x^ -I- 
2x^ - 3x^ +Ax + A). Let P = (-1,2), Q = (0,2), R = (-2,12), S = (3,62). We 
want to prove that, up to the hyperelliptic involution, these are the only integral 
points on X. 

The points on the Jacobian represented by differences of known rational points on 
X generate a subgroup of J(Q)/J(Q)tors of finite index; an explicit set of generators 
of this subgroup is given by 

{Pi = [{P) - M], P 2 = [(5) - (n;(Q))], P 3 = KMS)) - (i?)]}. 

As we do not need it for our method, we did not check whether these points generate 
the Mordell-Weil group modulo torsion; however, this should be possible using the 
techniques described in [46]. 

We apply the method from Section 8; leading to the following choices: 

(i) M = 3- 73 - 173 - 372 , 
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(ii) S = {5,41,607,617,1861,11131,17209}. 

The very bad primes are 2 and 31 and the set of intersection patterns is 

7 ^ = |(a,&) : aG|o,l,^,y,6e|o,i||. 

Now we give some detail on the quadratic Chabauty computation for pi = 7. 
We find the following Zy-points having p-values in the set T = \ogy{V). 


disk 

x{z) 

P{z) 

( 3 ,± 1 ) 

3 + 3-7 + 0 ( 73 ) 

0 


3 + 3-7 + 3 -72+ 0 ( 73 ) 

ilog 7 ( 31 ) 


3 + 2-7 + 5 -72+ 0(73) 

log 7 ( 2 ) 


3 + 2-7 + 72 + 0(73) 

log 7 ( 2 ) + ilog 7 ( 31 ) 


3 + 4-72 + 0(73) 

!logr( 2 ) 


3 + 0 ( 73 ) 

|log 7 ( 2 ) + ilog 7 ( 31 ) 


3 + 3-7 + 5-72 + 0(73) 

1 log 7 ( 2 ) 


3 + 3-7 + 72 + 0(73) 

|log 7 ( 2 ) + ilog 7 ( 31 ) 

( 4 ,± 1 ) 



( 0 ,± 2 ) 

4-7 + 5-72 + 0(73) 

0 


5-7 + 6-72 + 0(73) 

0 


4-7 + 2-72 + 0(73) 

ilog 7 ( 31 ) 


5-7 + 2-72 + 0(73) 

ilog 7 ( 31 ) 


0 ( 73 ) 

log7(2) 


2-7 + 2-72 + 0(73) 

log7(2) 


2 - 72 + 0(73) 

log 7 ( 2 ) + ilog 7 ( 31 ) 


2-7 + 0 ( 73 ) 

log 7 ( 2 ) + ilog 7 ( 31 ) 


4-7 + 0 ( 73 ) 

1 log 7 ( 2 ) 


5-7 + 4-72 + 0(73) 

1 log 7 ( 2 ) 


4-7 + 4-72 + 0(73) 

|log 7 ( 2 ) + ilog 7 ( 31 ) 


5-7 + 0(73) 

|log 7 ( 2 ) + ilog 7 ( 31 ) 

( 5 , ± 2 ) 

5 + 6-7 + 72 + 0(73) 

0 


5 + 4-7 + 5-72 + 0(73) 

0 


5 + 6-7 + 4-72 + 0(73) 

ilog 7 ( 31 ) 


5 + 4-7 + 2-72 + 0(73) 

ilog 7 ( 31 ) 


5 + 2-7 + 2-72 + 0(73) 

I log 7 ( 2 ) 


5 + 7 + 2-72 + 0(73) 

I log 7 ( 2 ) 


5 + 2-7 + 72 + 0(73) 

|log 7 ( 2 ) + ilog 7 ( 31 ) 


5 + 7 + 3-72 + 0(73) 

|log 7 ( 2 ) + ilog 7 ( 31 ) 


5 + 6-7 + 6-72 + 0(73) 

1 log 7 ( 2 ) 


5 + 4-7 + 73 + 0(73) 

1 log 7 ( 2 ) 


5 + 6-7 + 2-72 + 0(73) 

|log 7 ( 2 ) + ilog 7 ( 31 ) 


5 + 4-7 + 4-72 + 0(73) 

|log 7 ( 2 ) + ilog 7 ( 31 ) 















26 


JENNIFER S. BALAKRISHNAN, AMNON BESSER, AND J. STEFFEN MULLER 


disk 

x{z) 

P(^) 

(6, ±2) 

6 + 3-7 + 0 { 7 ^) 

0 


6 + 7 + 3 - 7 '^+ 0 { 7 ^) 

0 


6-k 3 • 7-f 3 • 72-t 0(73) 

ilog7(31) 


6 + 7 + 0 { 7 ^) 

ilog7(31) 


6 + 6-7-f 6-72 + 0(73) 

!logr(2) 


6 + 5-7 + 5-72 + 0(73) 

1 log7(2) 


6 + 6-7 + 5-72 + 0(73) 

|log7(2) + ilog7(31) 


6 + 5-7 + 6-72 + 0(73) 

|log7(2) + ilog7(31) 


6 + 3-7 + 5-72 + 0(73) 

1 log7(2) 


6 + 7 + 5-72 + 0(73) 

I log7(2) 


6 + 3-7 + 72 + 0(73) 

|log7(2) + ilog7(31) 


6 + 7 + 2-72 + 0(73) 

|log7(2) + ilog7(31) 

(2, ±3) 

2 + 72 + 0(73) 

0 


2 + 5-7 + 2-72 + 0(73) 

0 


2 + 0(73) 

ilog7(31) 


2 + 5-7 + 3-72 + 0(73) 

5 log? (31) 


2 + 7 + 4-72 + 0(73) 

log7(2) 


2 + 4-7 + 3-72 + 0(73) 

log7(2) 


2 + 7 + 0(73) 

log7(2) + ilog7(31) 


2 + 4-7 + 0(73) 

log7(2) + ilog7(31) 


2 + 4-72 + 0(73) 

1 log7(2) 


2 + 5-7 + 6-72 + 0(73) 

1 log7(2) 


2 + 3 - 72 + 0(73) 

|log7(2) + ilog7(31) 


2 + 5-7 + 0(73) 

|log7(2) + ilog7(31) 


After carrying out the quadratic Chabauty computations for 7,17 and 37, we are 
left with 31488 residue classes modulo 7^ • 17^ • 37^ for which we have to show that 
they do not contain the image of a rational point. We also add all residue classes 
modulo 3, leading to 850176 residue classes modulo M = 3 ■ 7^ • 17^ • 37^. Applying 
the Mordell-Weil sieve, we find that none of these residue classes can contain the 
image of a rational point. 

Since the index of the subgroup generated by differences of the known rational 
points on X in J(Q)/J(Q)tors is easily shown not to be divisible by any prime in 
the set S', this proves that our list of integral points is indeed complete. 

Example 9.3. Let X be the hyperelliptic curve 

= x‘^{x — 2 )^(x — l)(x + l)(a; + 2) + 4 

of genus 4. Let P = (0, 2), Q = (1,2), R = (2, -2), S = (-1, -2), U = (-2, 2). 
We want to show that these points, together with their images under n;, form the 
complete list of integral points. 

Using Magma, we show that the rank of the Jacobian over Q is 4 and that the 
torsion subgroup is trivial. A set of generators of the finite-index subgroup G of 
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J(Q) generated by differences of the known rational points on X is given by 
{Pi = [(P) - (Q)], P 2 = [(P) - (P)], P 3 = m) - (r;(P))], P 4 = [{w{Q)) - («;(P))]}. 

Because we cannot compute generators for the full Mordell-Weil group in genus 4, 
the techniques of [17] are not applicable. Moreover, the rank is equal to the genus, 
so the method of Chabauty-Coleman is not applicable. The P-unit techniques 
mentioned in Section 1.1 fail because in order to apply them in this case, we would 
need to compute class groups and fundamental units of number fields of degree 144. 
A similar complication arises when trying a combination of covering techniques with 
elliptic curve Chabauty. Hence none of the previously known methods are practical 
for this example. 

First we compute that 2 is the only very bad prime and that P = {O, 5 , }■ 

We then apply quadratic Chabauty for the good ordinary primes 5, 7,11,13 and 
17, to 6 , 4, 4, 4 and 4 digits of precision, respectively. For instance, we find the 
following Zs-points having p-values in the set T = \og^{'P): 


disk 

x{z) 

P{z) 

(0,±2) 

0(5«) 

3 • 5 -k 52 -h 2 • 54 -f 0(5®) 

¥log5(2) 

Tlog5(2) 

(1,±2) 

l-kO(5®) 

1 -k 5 -k 2 • 52 -k 54 -k 4 • 5® -k 0(5®) 

1-k 4 ■ 5-k 52 -k 2 • 5®-k 2 • 5®-k 0(5®) 
l-k2-5-k2-5®-k3-54-k2-5®-k 0(5®) 

1 logs (2) 
^log5(2) 
Tlog5(2) 
¥log5(2) 

(2, ±2) 

2-kO(5®) 
2-k5-k2-5®-k4-5®-k 0(5®) 

¥log5(2) 

¥log5(2) 

(3, ±2) 

3-k5-k4-52-k2-5®-k54-k 0(5®) 

3 -k 52 -k 3 • 5® -k 2 • 54 -k 3 • 5® -k 0(5®) 

3 + 4- 5-k4-52-k4-5®-k4-5^-k4-5®-k 0(5®) 

0 

^log5(2) 

¥log5(2) 

(4, ±2) 

4 -k 52 -k 5® -k 54 -k 3 • 5® -k 0(5®) 

4-k 5-k 3 • 54 -k 0(5®) 
4-k4-5-k4-52-k4-5®-k4-5^-k4-5®-k 0(5®) 
4-k2-5-k4-52-k5®-k2-54-k5®-k 0(5®) 

0 

0 

^log5(2) 

^log5(2) 


This leads to 9660096 residue classes modulo M = (5 ■ 7 ■ 11 ■ 13 ■ 17)^. Using the 
set S = (13,19,83,103,167, 727,971, 2909}, all of whose elements are easily shown 
to be coprime to the index (T(Q) : G), the Mordell-Weil sieve proves that none of 
these residue classes contain the image of a rational point on X. 
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Appendix A. Computing all integral points on elliptic curves using 

QUADRATIC ChABAUTY 

Let X be an elliptic curve of rank 1 over Q. For simplicity, we also assume 
that X(Q) is torsion-free. As described in Section 1.1, there exist quite efficient 
algorithms for the computation of the integral points on X ; the most practical ones 
are based on elliptic logarithms. Nevertheless, we can use quadratic Chabauty, for 
this purpose as well, as sketched below. 

Suppose we have already found the set A C U{1) of suspected integral points 
on A, and our goal is to prove the equality A = U{Z). 

Let P be the generator of A(Q). The first helpful observation is that we only 
have to consider residue disks not corresponding to affine multiples of the reduction 
P of P in the quadratic Chabauty computation. 

We define the function logp on A(Qp) by 

logp (2) = logp_p(z) = 

Joo ^0 

noting that this is indeed the discrete logarithm with respect to P for points in 

^(Q). 

Let V be the set of intersection patterns. We try to prove that A = U{Z) by 
showing, for each d S P, that there are no points in 14{Z) — A with intersection 
pattern d. 

We use quadratic Chabauty for several primes. Let us first discuss the case of 2 
primes. Following Silverman-Stange [39], we call a pair of distinct primes {pi,P 2 ) 
amicable if 

P 2 = #^(lFpi) and pi = #A(FpJ. 

More generally, we call a pair of distinct primes {pi,P 2 ) pseudo-amicable if 
P 2 I #A(FpJ and | #A(FpJ. 

Suppose that pi and p 2 are primes of good ordinary reduction such that {pi,P 2 ) 
is pseudo-amicable. For simplicity, assume that pi = #X(¥p^). We first apply 
quadratic Chabauty to X for pi and p 2 , keeping in mind that only residue classes 
corresponding to affine multiples of P have to be considered. Suppose that d G V 
and that z G X (Qp^) is a solution to Pp^ ( 2 ) = logp^ (d) which lifts to a rational point 
on X. Then we have 2 = aP for some a G Z. The discrete logarithm ai of 2 mod pi 
with respect to P is then congruent to a modulo p 2 ■ From a = logp p^ ( 2 ) mod pi 
we know the residue disk Uz,p 2 of the reduction of 2 modulo p 2 (more generally, if 
we had pi \ ^X (Fp^), then we would know that the reduction of 2 modulo p 2 lies 
in one of #A(Fp 2 )/pi explicitly given residue disks). 

We run through all solutions w G A(Qp 2 ) to Pp^iw) = logp^{d) in the residue 
disk Uz^p 2 and compute 

02 = logpp^{z) mod P 2 - 

Finally, we check whether oi = 02 ; if not, then we know that w doesn’t correspond 
to an integral point. If this happens for all such w, then we can discard 2 . 

Example A.l. Let X denote the elliptic curve 

y'^ =x^ - 4. 

Then X has rank 1 and trivial torsion over Q and P = (2, 2) is a generator of A(Q). 
Using an implementation of the algorithm based on elliptic logarithms mentioned in 
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Section (1.1) (for instance in Magma or Sage), we easily find that the only Z-integral 
points on X are ±P and ±Q, where Q = (5, 11). We want to recover this result 
using the techniques discussed above. First we compute that 2 is the only very bad 
prime and that V = {0,1} and ^X(Ft,) for all primes v < 100 of good and ordinary 
reduction. 

We find that the pair (13,7) is pseudo-amicable, since ^X(Fi 3 ) = 21 and 
#X(F 7 ) = 13. Using the algorithms in Section 3 we compute all solutions to 
Piziz) G {0, log 33 ( 2 )}. Since the order of the reduction P of P modulo 13 is 7, it 
sufhces to consider the 6 residue disks corresponding to nontrivial multiples of P. 
We then proceed as follows: For every solution z ^ {±P, zbQ} to piz{z) = logi^{d), 
where d € P, we assume that z does correspond to a rational point a ■ P G ^(Q) 
and we compute 

• the discrete logarithm a' S F 7 of z mod 13 with respect to P; 

• the residue disk Uzj of z mod 7, by computing oj ■ ^urj 

So we only have to check for all solutions w G Uz ,7 to P 7 [w) = log 7 (t), whether 



coincides with a'; if not, then we know that z ^ ^(Q). 

Using this approach, we succeeded in showing that indeed ±P, ±Q are the only 
integral points on X. 

More generally, we recall [39, Sec. 2, Dehnition] that an aliquot cycle of length 
I for X is a finite sequence of primes p = {pi,p 2 , ■ ■ ■ ,pi) with the property that 
=ffX(¥p.) = Pi+i, where i is taken modulo 1. We can similarly define pseudo-aliquot 
cycles by replacing the condition with the weaker one asserting only that Pi+i 
divides #X(FpJ. 

Definition A. 2. Let p be a pseudo-aliquot cycle of length I for X. A lift of p 
is a collection of points Zj £ Ar(QpJ, for each i = such that Ppi{zi) = 

logp^(d), and such that the entire collection satisfies the following conditions with 

m = logp^p.(zi) £ Qp,: 

• We have Ui G Zp.. 

• As pi+i divides ffX(¥p.), m+iP is restricted to certain residue classes in 
A(QpJ and we assume that Zi sits in one such residue class. 

Clearly an integral point Q G 7/(Z) with intersection pattern d GV gives rise to 
the lift of p where Zi is the image of Q in A (Qp^). We will say that p disqualifies 
d if there are no lifts of p other than the ones corresponding to points in A. This 
then proves that there are no points in Li (Z) — A with intersection pattern d. If we 
manage to disqualify all intersection patterns in P we prove that A = Li (Z). 

We have not tried to carry this out for cycles of length > 2 in practice. 
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